New answers tagged http
4
votes
How to allow a user to login via client X.509 certificate or username/password?
Client certificate (mutual TLS, or mTLS) authentication is only rarely used for user-facing applications, because it complicates the authentication flow by taking credentials at two different layers: ...
- 52.1k
6
votes
How to allow a user to login via client X.509 certificate or username/password?
The first option is an accurate description of how mTLS with a fallback to password authentication can be implemented, and it's probably the most convenient approach both for you and your users. You ...
- 22.9k
1
vote
how to reset only TCP connections to my web server which are just TCP packets, but no further HTTP packets
This is the kind of thing that should be done by either
a firewall (you ought to be able to define "minimum transmission rate" and "time after which a minimum-transmission rate channel ...
- 23k
1
vote
How to securely allow localhost to access through CORS, without exposing it to anyone's localhost?
I would create a web app, load it in localhost, and make a request from the frontend localhost to whatever backend API I want.
An attacker can already perform any request they want, using cURL or ...
- 34.4k
Top 50 recent answers are included